matlab-discover-clusters
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONOBFUSCATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes MATLAB commands to manage parallel computing profiles, including importing configuration files (.mlsettings), exporting settings, and deleting existing profiles. It also executes the bundled discoverClusters script to scan for network and cloud resources.
- [OBFUSCATION]: The file scripts/discoverClusters.p is a MATLAB P-coded file. P-code is a standard vendor-provided format for distributing executable MATLAB content that is non-human-readable. While this is normal for vendor resources, it prevents full static analysis of the discovery logic.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including network discovery responses and local configuration files.
- Ingestion points: Processes metadata from discovered clusters (Type, Name, Host) and properties from imported profile files.
- Boundary markers: The skill relies on standard MATLAB parameter passing; no explicit sanitization of imported metadata strings is described in the prompt patterns.
- Capability inventory: The skill possesses file writing, network connectivity, and profile deletion capabilities.
- Sanitization: Metadata from discovered or imported clusters is used to construct MATLAB objects and profiles. Maliciously crafted configuration data could potentially influence agent command generation if interpolated without proper escaping.
Audit Metadata